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AMENDMENTS TO THE CLAIMS 

Upon entry of this amendment, the following listing of claims will replace all prior 
versions and listings of claims in the pending application. 
Listing of Claims 

1. (Currently amended) A method for virtualizing access to native resources, the method 
comprising: 

receiving a request to access a first native resource provided by an operating system from 
a process executing within a context of an isolation environment including an application 
isolation layer and a user isolation layer, the request including a virtual name for the first native 
resource; 

determining that a rule action specifying remap -redirection is associated with the virtual 
name included in the received request; 

forming a literal name for the native resource responsive to the rule action and the virtual 
name , the literal name identifying a -feefa ksecond native resource e£ having the same type as the 
requested resource; and 

issuing to the operating system a request to access the second native resource, the request 
including the determined formed literal name for the native resourc e. 

2. (Currently amended) The method of claim 1 wherein receiving a request to access a first 
native resource comprises: receiving a request from a process executing in the context of an 
isolation environment to access a first named system object, the request including a virtual name 
for the first named system object. 

'3. (Cancelled). 

4. (Currently amended) The method of claim 1 wherein receiving a request to access a native 
resource comprises: receiving a request from a process executing in the context of an isolation 
environment to access a first file system element, the request including a virtual name for the 
first file system element. 
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6. (Currently amended) The method of claim 1 wherein receiving a request to access a native 
resource comprises: receiving a request from a process executing in the context of an isolation 
environment to access a first registry key, the request including a virtual name for the first 
registry key. 

7. (Cancelled). 

8. (Currently amended) The method of claim 1 wherein receiving a request to access a native 
resource comprises: receiving a request from a process executing in the context of an isolation 
environment to access one of a first window and a first w indow class, the request including one 
of a virtual name for the first window and a virtual name for the first window class. 



9. (Cancelled). 

10. (Currently amended) The method of claim 1 wherein forming a literal name further 
comprises: 

accessing a rules engine to determine a rule action associated with the virtual name 
received in the request; and 

forming a literal name for the first native resource responsive to the determined rule, the 
formed literal name identifying a literal -second native resource of the same type as the requested 
resource. 

11. (Currently amended) The method of claim 1 further comprising: receiving a handle from the 
operating system identifying the accessed object second native resource . 

12. (Previously Presented) The method of claim 1 1 further comprising: transmitting the handle to 
the process. 
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13. (Cancelled). 

14. (Currently amended) A computer implemented apparatus virtualizing access to native 
resources provided by an operating system executing on a processor of a computer 
v i rtualiz i ng access to native resources , the apparatus comprising: 

a hooking mechanism receiving a request to access a first native resource from a process 
executing in the context of an isolation environment including an application isolation layer and 
a user isolation layer, the request including a virtual name for the first native resource; 

a rules engine storing a rule action associated with the virtual name included in the 
received request, the rule action specifying rema predj recti on ; 

a name virtualization engine forming a literal name for the native? resource, the formed 
literal name identifying a literal -second native resource of the same type as the requested 
resource; and 

an interface of an operating system executing on a processor of a computer, the interface 

requesting access to the identified literal -second native resource. 

15. (Currently amended) The apparatus of claim 14 wherein the hooking mechanism intercepts a 
request to open a first native resource. 

16. (Currently amended) The apparatus of claim 14 wherein the hooking mechanism intercepts a 
request to create a first native resource. 

17. (Cancelled). 

18. (Previously Presented) The apparatus of claim 14 wherein the rules engine comprises a 
database. 

19. (Cancelled) 

20. (Original) The apparatus of claim 14 wherein the hooking mechanism comprises a file 
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system filter driver. 

21. (Original) The apparatus of claim 14 wherein the hooking mechanism comprises a mini- 
filter. 

22. (Original) The apparatus of claim 14 wherein a native file system comprises the hooking 
mechanism. 
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